Bug 1312276 - IPA view: view name not stored properly with default FreeIPA installation
Summary: IPA view: view name not stored properly with default FreeIPA installation
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: sssd
Version: 7.3
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: SSSD Maintainers
QA Contact: Steeve Goveas
URL:
Whiteboard:
Depends On:
Blocks: 1329647
TreeView+ depends on / blocked
 
Reported: 2016-02-26 10:14 UTC by Jakub Hrozek
Modified: 2020-05-02 18:21 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
: 1329647 (view as bug list)
Environment:
Last Closed: 2016-07-14 21:10:14 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Github SSSD sssd issues 4001 0 None closed IPA view: view name not stored properly with default FreeIPA installation 2020-05-02 18:19:07 UTC
Github SSSD sssd issues 4034 0 None closed Protocol error with FreeIPA on CentOS 6 2020-05-02 18:21:35 UTC

Description Jakub Hrozek 2016-02-26 10:14:02 UTC 
This bug is created as a clone of upstream ticket:
https://fedorahosted.org/sssd/ticket/2960

If the idview feature of FreeIPA is use with running ipa-adtrust-install on the server, i.e. after a default installation, SSSD cannot save the applied view name to the cache and only returns the default view for IPA users and groups.

This issue was reported originally in https://www.redhat.com/archives/freeipa-users/2016-February/msg00148.html
Comment 1 Jakub Hrozek 2016-02-26 11:07:46 UTC 
Fixed upstream:
    master:
        b5d48539966aefbea703377ba2ebcb67f9cf88b8
        b25d33b0a775e2337014a334699156ac56b08f9b 
    sssd-1-13:
        022e4575980324c2c68a05b3f250bd1a72bc9885
        1d4d3f15b5cb9b9ffad521ddea0b1e3660587816
Comment 2 Jakub Hrozek 2016-03-02 09:30:58 UTC 
To test, please make sure that id views work correctly even for IPA users on a server that does not have a trust relationship established towards an AD domain.
Comment 3 Mike McCune 2016-03-28 23:37:25 UTC 
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions
Comment 4 Lukas Slebodnik 2016-04-19 11:29:02 UTC 
Upstream ticket:
https://fedorahosted.org/sssd/ticket/2993
Comment 5 Jakub Hrozek 2016-04-22 17:02:41 UTC 
Additional fix:
    master: 57d8b4b9254442a568838cb60ea16068965f2df0
    sssd-1-13: e5fbaf42f87725e42a40e542c06d5f4cdf4c52c2
Comment 7 RHEL Program Management 2016-06-23 15:56:20 UTC 
Quality Engineering Management has reviewed and declined this request.
You may appeal this decision by reopening this request.
Comment 8 Lukas Slebodnik 2016-06-23 17:20:07 UTC 
I do not think this bug should be closed as won't fix. Patch is available in upstream
Comment 10 Jakub Hrozek 2016-07-14 21:10:14 UTC 
This bug was fixed during 7.4 rebase.
Comment 11 Jakub Hrozek 2016-07-14 21:10:42 UTC 
I meant 7.3 rebase, sorry.
Comment 12 Luc de Louw 2016-10-14 13:33:57 UTC 
Workaround for RHEL 7.2:

Install AD Trust and run it even if you don't plan to use AD trust at all:

# yum -y install ipa-server-trust-ad
# ipa-adtrust-install
Comment 13 Lukas Slebodnik 2016-10-19 07:27:16 UTC 
The bug is closed, but who will test it?
Comment 14 Jakub Hrozek 2016-10-19 08:36:58 UTC 
(In reply to Lukas Slebodnik from comment #13)
> The bug is closed, but who will test it?

Note that its RHEL-6 clone will be tested during 6.9 testing phase:
https://bugzilla.redhat.com/show_bug.cgi?id=1329647
Note You need to log in before you can comment on or make changes to this bug.